-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sat, 03 Oct 2009 08:30:33 +0200 Source: samba Binary: samba samba-common-bin samba-common samba-tools smbclient swat samba-doc samba-doc-pdf smbfs libpam-smbpass libsmbclient libsmbclient-dev winbind samba-dbg libwbclient0 Architecture: source all i386 Version: 2:3.4.2-1 Distribution: unstable Urgency: high Maintainer: Debian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org> Changed-By: Christian Perrier <bubulle@debian.org> Description: libpam-smbpass - pluggable authentication module for Samba libsmbclient - shared library for communication with SMB/CIFS servers libsmbclient-dev - development files for libsmbclient libwbclient0 - Samba winbind client library samba - SMB/CIFS file, print, and login server for Unix samba-common - common files used by both the Samba server and client samba-common-bin - common files used by both the Samba server and client samba-dbg - Samba debugging symbols samba-doc - Samba documentation samba-doc-pdf - Samba documentation in PDF format samba-tools - Samba testing utilities smbclient - command-line SMB/CIFS clients for Unix smbfs - Samba file system utilities swat - Samba Web Administration Tool winbind - Samba nameservice integration server Changes: samba (2:3.4.2-1) unstable; urgency=high . * New upstream release. Security update. * CVE-2009-2813: Connecting to the home share of a user will use the root of the filesystem as the home directory if this user is misconfigured to have an empty home directory in /etc/passwd. * CVE-2009-2948: If mount.cifs is installed as a setuid program, a user can pass it a credential or password path to which he or she does not have access and then use the --verbose option to view the first line of that file. * CVE-2009-2906: Specially crafted SMB requests on authenticated SMB connections can send smbd into a 100% CPU loop, causing a DoS on the Samba server. Checksums-Sha1: 70656170c91a9d890a634ca8e2526fdb9b94a3b9 2229 samba_3.4.2-1.dsc 4077302ed27b6d9f50bbcfba58ca6a58fe9d0f59 34979734 samba_3.4.2.orig.tar.gz 56c5afc01825da49094e7d8fa5cba36a41e06a10 469922 samba_3.4.2-1.diff.gz 08328b94d7247dcc9928f189d272ad194a87a068 375610 samba-common_3.4.2-1_all.deb 171d2be5028744e5fa9c533a7e6e8a119682baad 7998106 samba-doc_3.4.2-1_all.deb 854cfb8bb690fbb366c5c5af383e23437885248f 6702840 samba-doc-pdf_3.4.2-1_all.deb bb6ca23b5a7826f9ff09b89f8141745bd5e50ae1 6182244 samba_3.4.2-1_i386.deb 106a0cd36e37ecfd04ce0580bc172400b32288f2 4737558 samba-common-bin_3.4.2-1_i386.deb 9098f8fd84b976751b7ea83a38c8767260ab17ab 9688836 samba-tools_3.4.2-1_i386.deb b7fb41257bcf46a04be86779b9a74e43a024f1a2 11303016 smbclient_3.4.2-1_i386.deb 04aa106ebc8c8397ecbee1febab1c4cdb693750e 1873664 swat_3.4.2-1_i386.deb 7ffa3676520770830ecbd5201108cc3e22fb6d81 1811616 smbfs_3.4.2-1_i386.deb b6fc8de158656b409810ba87f633309f4004192f 659702 libpam-smbpass_3.4.2-1_i386.deb 4c4a42f2587000523189f4b5557ff792e9b75594 1630274 libsmbclient_3.4.2-1_i386.deb f4d13f5ad69a7f6a72273f68df40b41228197efb 2416604 libsmbclient-dev_3.4.2-1_i386.deb c8fcd58bdca5ff3c96b8c9fecd352871df74dace 4329242 winbind_3.4.2-1_i386.deb 0c7edd78cbad623158efa0f54e08d9a65c5a4e41 47866778 samba-dbg_3.4.2-1_i386.deb 844c3c6fabfea0fe0dbb19b07bd7690962a98e91 89064 libwbclient0_3.4.2-1_i386.deb Checksums-Sha256: 1a14b53822c9c20f90d3db292ff08af7d3df550c6302aa635ceb88042dcf68c0 2229 samba_3.4.2-1.dsc 8b880e78d175a82df627d61a070461812bba209b21346aa0383cd5c96d364fc4 34979734 samba_3.4.2.orig.tar.gz e34e3ddb7ab73d57feb79770ebe74d2ba5b889ae0ccd54f352c09274f48891a5 469922 samba_3.4.2-1.diff.gz 7a13abe60c057b791afbabf1a753a7e3c9e083e95a43adcc0621d796cbed9e54 375610 samba-common_3.4.2-1_all.deb 015cd66d7d2c5c2c1ed9013973126e4fa567e938358ab8af4bf2cb098576ead9 7998106 samba-doc_3.4.2-1_all.deb 024398295a5c1c30602cd5f299b247fbd3df4f3317e86b9faf4fc840cc280c9d 6702840 samba-doc-pdf_3.4.2-1_all.deb d7c2cac6159bca691930656cebd81e4692c0bd4953343227e838f3de5428e393 6182244 samba_3.4.2-1_i386.deb 0d7b52aa1328185be4bd4570edaf9e07b2100b364a68723cb63d217f451a0229 4737558 samba-common-bin_3.4.2-1_i386.deb 0411a31437f74d129b5c301dc7fb1dd425dcdb7a2ce5684508d8c3e5d267c109 9688836 samba-tools_3.4.2-1_i386.deb 6cb437a9e7a15158d7fc8d74ca8bfb3572dab3a317882e89530d4c261844cfb0 11303016 smbclient_3.4.2-1_i386.deb bdb08f152286303503081534343f51bff2479d173538969756fe2d17822c549b 1873664 swat_3.4.2-1_i386.deb 64299838dc21e9d7e353e4c8b7ee444851c563193595813be1cf595bd1408c5a 1811616 smbfs_3.4.2-1_i386.deb 7f5676f5ca24f460eb148233709b1f8faec3214c8f665965707985cf2f44d902 659702 libpam-smbpass_3.4.2-1_i386.deb af4d26ea44d8b39f1be906f0d4be814d6bdaa387bb3b2a8c7340472b1a0a6227 1630274 libsmbclient_3.4.2-1_i386.deb 0c05b621b2ba8752b87bd03ce15bea9418286596565962363136528ce47015fc 2416604 libsmbclient-dev_3.4.2-1_i386.deb a8e28128ee3c40bdf4b865a2f840312c529b224ea92a83ed6b59b239d5c0cafb 4329242 winbind_3.4.2-1_i386.deb bd8971c00f7eb180064fcf9e1fe9fa8857bd9b753068b517a6a069dce450f82a 47866778 samba-dbg_3.4.2-1_i386.deb cf8af0b924f77d9f6a17d8a61fe0c5c6b60d3cc3223c47b35b30e367d50da812 89064 libwbclient0_3.4.2-1_i386.deb Files: 656fe82d86c6e39c13c9125bc5dc7b64 2229 net optional samba_3.4.2-1.dsc 85fefafbeb94181c9df4b752e5ed7049 34979734 net optional samba_3.4.2.orig.tar.gz 802cf10bcac0c30203bf133b31a5bf85 469922 net optional samba_3.4.2-1.diff.gz aeabf9fd2706a4ad8954c653c2eb39de 375610 net optional samba-common_3.4.2-1_all.deb 6744f3b3b7ff4db41fb8d2ba7b335568 7998106 doc optional samba-doc_3.4.2-1_all.deb 628cfe041708363dd04688842c2a60ca 6702840 doc optional samba-doc-pdf_3.4.2-1_all.deb dd49e0f143fb19ed0aacb3b6dec2b10f 6182244 net optional samba_3.4.2-1_i386.deb 7f27d96430e6f01e55a1c9c76dc9fdb7 4737558 net optional samba-common-bin_3.4.2-1_i386.deb 750f274c329d90e298308b7de9b525d7 9688836 net optional samba-tools_3.4.2-1_i386.deb 5f094e2c327498fd2a8f63bcdd5feb8e 11303016 net optional smbclient_3.4.2-1_i386.deb 77a300ee67a4fd8ab52c12589ba6d2cc 1873664 net optional swat_3.4.2-1_i386.deb ca88405169ecdca21380855c09744826 1811616 otherosfs optional smbfs_3.4.2-1_i386.deb 50c82dc5f44a5c6cbea9089b895dc78c 659702 admin extra libpam-smbpass_3.4.2-1_i386.deb f611826f9e3bb83dbcc2822f3687d3eb 1630274 libs optional libsmbclient_3.4.2-1_i386.deb 86585aa0cd36421adb689e963e60fb4c 2416604 libdevel extra libsmbclient-dev_3.4.2-1_i386.deb 67a725967e254e34843af3fa195d5b4b 4329242 net optional winbind_3.4.2-1_i386.deb 7bf14b37476c270de282e276318a9743 47866778 debug extra samba-dbg_3.4.2-1_i386.deb c40da1bb87bcb83dcdef193b2c19032d 89064 libs optional libwbclient0_3.4.2-1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFKyDEP1OXtrMAUPS0RAlTsAJ0buQPO3HFA/dPS2zoj8MtlbfwqIwCdH9QV d9K78So8BNTTLfEX2UlxWvo= =Ei8/ -----END PGP SIGNATURE----- Accepted: libpam-smbpass_3.4.2-1_i386.deb to pool/main/s/samba/libpam-smbpass_3.4.2-1_i386.deb libsmbclient-dev_3.4.2-1_i386.deb to pool/main/s/samba/libsmbclient-dev_3.4.2-1_i386.deb libsmbclient_3.4.2-1_i386.deb to pool/main/s/samba/libsmbclient_3.4.2-1_i386.deb libwbclient0_3.4.2-1_i386.deb to pool/main/s/samba/libwbclient0_3.4.2-1_i386.deb samba-common-bin_3.4.2-1_i386.deb to pool/main/s/samba/samba-common-bin_3.4.2-1_i386.deb samba-common_3.4.2-1_all.deb to pool/main/s/samba/samba-common_3.4.2-1_all.deb samba-dbg_3.4.2-1_i386.deb to pool/main/s/samba/samba-dbg_3.4.2-1_i386.deb samba-doc-pdf_3.4.2-1_all.deb to pool/main/s/samba/samba-doc-pdf_3.4.2-1_all.deb samba-doc_3.4.2-1_all.deb to pool/main/s/samba/samba-doc_3.4.2-1_all.deb samba-tools_3.4.2-1_i386.deb to pool/main/s/samba/samba-tools_3.4.2-1_i386.deb samba_3.4.2-1.diff.gz to pool/main/s/samba/samba_3.4.2-1.diff.gz samba_3.4.2-1.dsc to pool/main/s/samba/samba_3.4.2-1.dsc samba_3.4.2-1_i386.deb to pool/main/s/samba/samba_3.4.2-1_i386.deb samba_3.4.2.orig.tar.gz to pool/main/s/samba/samba_3.4.2.orig.tar.gz smbclient_3.4.2-1_i386.deb to pool/main/s/samba/smbclient_3.4.2-1_i386.deb smbfs_3.4.2-1_i386.deb to pool/main/s/samba/smbfs_3.4.2-1_i386.deb swat_3.4.2-1_i386.deb to pool/main/s/samba/swat_3.4.2-1_i386.deb winbind_3.4.2-1_i386.deb to pool/main/s/samba/winbind_3.4.2-1_i386.deb